Privacy policy

Data Privacy Notice for NEW-WALLS.com

status: September 2023

General Information
1. Protecting your personal data is important to us. Via this Notice we like to inform you about collecting and use of personal data in the event you visit our online shop.
2. Responsible party in line with art. 4 para. 7 EU - General Data Protection Regulation (GDPR) is: A.S. Création Tapeten AG, Südstraße 47, 51645 Gummersbach, Germany You can reach out to our data protection officer at datenschutz@as-creation.com or via our postal address.
3. For the purpose of processing technically necessary personal data, in connection with a contract or upon your consent, cookies shall be stored on your computer if you use our online shop. Cookies are small text files, which are stored on your hard disc and which are connected to the browser you use; via such text file the owner of the cookie shall receive certain information. Cookies cannot execute programs or transfer viruses to your computer. Irrespective of your consent you can configure your browser settings according to your purposes and e.g., reject the acceptance of certain or all cookies (see also clause 12). We have to point out, that you may not be able to use all functions of our online shop, if you only accept technically necessary cookies.
4. Cookies are deleted after a certain period of time, which may vary depending on type and function of the cookie. Collected personal data shall be deleted within the legally given period of time, which depends on the purpose of use of such personal data.
5. Cookie Consent Manager When you visit our online shop a cookie will be set to document your consent to various services. It is documented if and which service you consent to. You can change your selection at any time by clicking here and save your new consent selection. If you de-select a certain service and later, you activate this particular service during your visit of our online shop, this activation shall be documented as consent in the cookie consent manager. This cookie for consent management is set and administered by us. These data shall be documented in the cookie:
  - IP-address
  - consent selection
  - date and time of selection
  If you delete all cookies at the end of your browser session, you will be asked for your consent selection anew when you visit our online shop again. In the event you do not delete the cookies, after six months you will be automatically asked, if your consent selection is still up to date. Legal basis: legal obligation to proof consent given by the user, art. 6 para. 1 sent. 1 lit. a GDPR.
Your Rigths
1. You have these rights with regard to your personal data:
  - Right of access (art. 15 GDPR),
  - Right to rectification (art. 16 GDPR),
  - Right to erasure (art. 17 GDPR),
  - Right to restriction (art. 18 GDPR)
  - Right to data portability (art. 20 GDPR),
  - Right to object (art. 21 GDPR).
2. If you have given consent to processing your personal data, you can revoke your consent at any time in full or partially. Such revocation does only influence the validity of data processing as of the time you have made your revocation. You can reconfigure your consent here.
3. If we base processing of your personal data on our legitimate interest, you can object. Please inform us about your reasons why we should not process your personal data. Upon your reasoning we shall evaluate the facts and either we stop or adjust the data processing, or we will demonstrate compelling legitimate grounds for the processing.
4. Please turn your request to our data protection officer (see clause 1.2). In addition, you have the right to file an objection to our processing at any national data protection authority.
Collection of Personal Data during your visit at our online shop
1. 3.1 Visit at our online shop Upon your visit to our online shop, we collect such personal data which is technically necessary to visualize our online shop in appealing format and quality and to secure stability and security of our online shop. This data shall be recorded in a server log file:
  - Landing page
  - Time of first visit to website
  - Volume of sent data in byte
  - Website from which you referred to us
  - used browser
  - used operation system, language and release no of your operation system
  - your IP-address (if so: in anonymized form)
  legal basis: legitimate interest to necessary functionality of our online shop, art. 6 para. 1 sent. 1 lit. f GDPR.
2. Registration and Order If you want to order in our online shop, it is necessary for contract conclusion that you provide us with such personal data, which we need to process and execute your order. Obligatory information is marked. We process your data in order to execute your order. In order to prevent illegitimate access by third parties to your personal data (in particular financial data) the ordering process is encrypted by TLS-technique. Legal basis: processing is necessary for the performance of a contract to which the data subject is party, art. 6 para. 1 sent. 1 lit. b GDPR.
  1. This data is documented in a server log file for registration:
    - email address
    - password
  2. This data is documented in a server log file for ordering:
    - first and last name, email address
    - if applicable: company data
    - invoice address, if deviating: delivery address
    - order value
    Due to commercial and tax legislation we are obliged to store your address, payment details and order data for a period of ten years. After two years we limit our processing in such a way, that your data is only used to comply with the aforementioned obligation.
3. Execution of Contract For executing our contract, we pass on some of your personal data to third parties. Legal basis: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, art. 6 para. 1 sent. 1 lit. b GDPR.
  1. Payment Service Provider Depending on your selection of payment service provider during the ordering process, we pass on (personal) data to the respective service provider which is necessary for executing the payment. The data protection notice of the respective payment service provider is applicable. We transfer this data to the payment service provider:
    - first and last name, email address
    - if applicable: company data
    - invoice address
    - order value
    If you choose PayPal, you will be re-directed automatically to the website of PayPal (Europe) S.a.r.l. et Cie, S.C.A. (address: 22-24 Boulevard Royal, LU-2449 Luxembourg). Authorization and execution of payment is processed via the website of PayPal. Which personal data will be collected by PayPal you may learn here:
    - Data protection declaration: ttps://www.paypal.com/webapps/mpp/ua/privacy-full
    - Cookie Information: https://www.paypal.com/myaccount/privacy/cookiePrefs
    - Information on bank service providers: https://www.paypal.com/de/smarthelp/complaints
    If you choose Mollie, you will be re-directed automatically to the website of Mollie B.V. (address: Keizersgracht 126, 1015 CW Amsterdam, the Netherlands). Authorization and execution of payment is processed via the website of Mollie. Which personal data will be collected by Mollie you may learn here:
    - Data protection declaration: https://www.mollie.com/de/privacy
    - Cookie Information: https://www.mollie.com/de/cookies
    - Information on bank service providers: https://www.mollie.com/de/processors
  2. If necessary, for delivery, we pass on the following data to the shipment service provider:
    - first and last name, email address
    - delivery address
    The shipment service provider may contact you prior to delivery in order to inform you about the delivery date and time or to agree on other details of delivery.
4. Room Visualizing You have the option to see our wallpaper by mode of augmented reality, i.e., you can see the wallpaper displayed in a room of your choice. For this purpose, we cooperate with our partner Leap Tools Inc. (address: 1255 Bay Street, Suite 403, Toronto ON, M5R 2A9, Canada).
  1. If you click the visualizing button and you choose to see the wallpaper in standard rooms or in a picture you have uploaded, our partner will set a cookie which files this data: IP-address (anonymized by random identifying number), date and time;
  2. If you send the picture you have configured to you or a third party, the email-address(es) shall be stored by our partner to perform the sending of emails.
  The data shall be stored by Leap Tools Inc. on a server which is located outside of the European Union. To ensure the requirements of the GDPR a data processing agreement has been concluded. Further information on data privacy executed by Leap Tools Inc. you will find at: https://www.roomvo.com/privacy_policy Via our partner we receive anonymized statistical data in relation to use of the standard room pictures, uploaded room pictures and buying patterns. We receive no additional data, in particular, we do not receive information upon which we could identify the individual user.
6. Communication
  1. If you contact us via email or via our contact form the personal data you provide to us (mandatory data are marked with * in the contact form) will be stored in a log file to answer your questions. Legal basis: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, art. 6 para. 1 sent. 1 lit. b GDPR.
  2. If you contact us via WhatsApp this personal data will be stored to answer your questions:
    - account information
    - profile name
    - phone number
    We use your data solely to answer your request. We herewith inform you that the use of WhatsApp is only under control of WhatsApp Inc. By installing WhatsApp on your device, you have agreed to the terms of use of WhatsApp. We store your confirmation (i.e., your "yes" within the WhatsApp-chat), that you have read this Data Privacy Notice. WhatsApp Inc. (address: 1601 Willow Road, Menlo Park, California 94025, USA) processes your personal data in the USA and shares this data with its affiliated company Facebook Inc. You can find WhatsApp's data privacy information here: https://www.whatsapp.com/legal/business-policy/ Legal basis: processing of data upon your consent, art. 6 para. 1 sent. 1 lit. a GDPR. If you do not wish for any data processing by WhatsApp, you may contact us via email or via phone.
  3. This data is being erased when it is not necessary anymore, after 10 years at the latest.
Newsletter
1. We use double-opt-in process for our newsletter registration: after your subscription to our newsletter, we will send an email to the indicated email address with which we ask for your confirmation of newsletter subscription. Obligatory data is only your email address. Optional data is your first and last name and your date of birth. Optional data shall only be used to address you personally and to congratulate you to your birthday or to celebrate your jubilee. If you do not confirm your subscription within 7 days, your data shall be blocked and deleted automatically after one month.
2. As verification of date, time and scope of your newsletter subscription (as well as un-subscription) we store the following data by setting a cookie:
  - timestamp of subscription / un-subscription (date and time)
  - IP-address
  - newsletter content selection
3. Legal basis (newsletter): consent to the processing of his or her personal data for one or more specific purposes, art. 6 para. 1 sent. 1 lit. a GDPR. Legal basis (cookie): compliance with the legal obligation to prove consent, art. 6 para. 1 sent. 1 lit. c GDPR.
4. The newsletter shall be sent via the service provider rapidmail GmbH (address: Wentzingerstrasse 21, 79106 Freiburg, Germany) who is processing the personal data on our behalf. The service provider is located within the European Union. Data will not be transferred to third countries. You can find the data protection declaration of rapidmail GmbH here: https://www.rapidmail.de/datensicherheit
5. You may withdraw your consent to receiving the newsletter at any time by un-subscription. You can either unsubscribe (i) by clicking the unsubscribe-link provided in each newsletter email, or (ii) by sending your withdrawal notice to service@new-walls.com
6. We carry out statistical analysis regarding the click rate of our newsletter links. For this purpose, the emails sent contain a so-called tracking pixel that connects to rapidmail's servers when the email is opened. This enables us to determine whether a newsletter message has been opened. Furthermore, it can be determined whether and which links in the newsletter message are clicked. Optionally, links in the email can be set as tracking links with which your clicks can be counted. Upon this data we can measure the rate between information in our newsletter and visit of the respective online shop campaign.
Trusted Shops Trustbadge
1. We have embedded the Trusted Shops Trustbadge in our online shop to show the Trusted Shops seal of quality, to show the rating of our online shop collected by Trusted Shop, and to give a customer the option to use the services of Trusted Shops in relation with an order.
2. The trustbadge and related services are services of Trusted Shops GmbH (address: Subbelrather Str. 15C, D-50823 Köln). The trustbadge is provided by a CDN- service provider (Content-Delivery-Network). Trusted Shops GmbH uses services providers located in the USA. An adequate level of data protection is secured. More information on data protection by Trusted Shops GmbH you will find on their homepage (langue selection possible): https://www.trustedshops.de/
3. Upon accessing the trustbadge the Trusted Shops -web server stores automatically a server log file which collects the following access data:
  - IP-address
  - date and time of access
  - volume of transferred data
  - provider used
  Certain access data shall be stored in a security database to enable analysis of conspicuous access. Log files are deleted automatically after 90 days.
4. Additional personal data shall be transferred to Trusted Shops GmbH, if you decide to use a Trusted Shops service after your ordering process or if you are already registered at Trusted Shops. The contractual provision concluded between Trusted Shops GmbH and you shall apply. Personal data shall be extracted automatically from your ordering data. Identification if you are a registered customer shall be done by a neutral parameter (cryptological single-use, hashed email address), thus the email address shall be encrypted into a hash-code, which cannot be decrypted by Trusted Shops. After verification of a match, the parameter shall be deleted automatically.
5. Legal basis: legitimate interest to provide customer protection in relation to its order and to receive performance rating, art. 6 para. 1 sent. 1 lit. f GDPR.
Analysis
1. We use the following Google services in our online shop:
  1. Google Web Analytics is a service for recording the interaction of a user with our online shop, the products and other contents of our online shop. This enables us (i) to ensure that our online shop is designed and continuously optimised to meet your needs; and (ii) to record and evaluate your usage statistically in order to optimise our offer for you. For this analysis, cookies are stored on your computer, which collect the following information about your use of this online shop:
    - browser type/version
    - used operating system
    - referrer URL (the previously visited page)
    - IP address
    - time of the server request
    - user behaviour (view, purchase activities)
  2. We advertise this online shop via Google Adwords Conversion. When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you have clicked on the ad and have been redirected to this page. Each Google Adwords customer receives a different cookie. Thus, there is no way that cookies can be tracked across websites of Google Adwords customers. The information obtained with the help of the conversion cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag.
  3. We use Google Remarketing to advertise our products by showing you our ads when you continue to use the internet after visiting our online shop. This means that the cookie is used to set a device identifier in order to display ads to you based on your previous usage behaviour. In order to present advertising tailored to your interests Cookies are stored on your computer, which record the following information about your surfing behaviour:
    - Visit to the online shop
    - Use of the online shop
  4. Via Google Tag Manager, your IP address is only shortened by Google (so-called IP masking).
2. Google Web Analytics, Google Adwords Conversion, Google Remarketing and Google Tag Manager are services of Google Inc. (address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The responsible party and contact person in the EU is Google Ireland Limited (address: Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland). The information generated by the cookies is transferred to a Google server in the USA and stored there. Your anonymized, personal data may be used by Google for any of its own purposes, such as profiling, and may be linked to other data.
  1. If you have a Google Account and have agreed to have your web and app browsing history linked to your Google Account by Google, information from your Google Account will be used to personalise ads. Your Google ID will be temporarily associated with your Google Analytics data in order to optimise your targeting. To disable this feature, please refer to the instructions provided by Google itself and in section 12. More information on data protection and cookies at Google can be found in Google's privacy policy: https://policies.google.com/privacy
  2. We are a contractual partner of Google and only receive anonymised, statistical data about our online shop and our advertising measures via its services. We do not receive any further data, in particular we cannot identify users from this information. We have no influence on the data collected by Google, nor are we aware of the full extent of the data collection and the storage period. We have also concluded a contract with Google Inc. (USA) for order processing in accordance with Art. 28 GDPR.
  3. The legal basis for (i) the processing of your data for marketing purposes is your consent pursuant to Art. 6 (1) sent. 1 lit. a GDPR; (ii) the processing of anonymous data for statistical purposes is our legitimate interest in the design of our online shop and the efficiency of advertising pursuant to Art. 6 para. 1 sent. 1 lit. a GDPR.
3. We use the following service from Hotjar on our online shop:
  1. Observe is a service for recording the interaction of a user with our online shop and the contents of our online shop. The Observe analysis tool is used to measure and monitor user behaviour.
  2. For this analysis, cookies are stored on your computer, which collect the following information about your use of the online shop:
    - Hotjar's unique user ID;
    - Resolution of the terminal screen;
    - Terminal device type (individual terminal device identifiers), operating system and browser type;
    - console logs and errors;
    - geographic location (country only);
    - language preferred when viewing the Hotjar-based website;
    - Mouse events (movements, location and clicks);
    - keystrokes;
    - referring URL and domain;
    - Pages visited;
    - Date and time of access to your website and a specific event on your website;
  3. All data is stored by Hotjar on servers located in the EU or EEA.
4. Observe is a service provided by Hotjar Ltd (address: Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta). Hotjar Ltd is part of the Content Square SaaS Group with headquarters in Paris, France. Hotjar Ltd. and Content Square SaaS are jointly responsible. For more information on data protection and cookies at Hotjar Ltd, please refer to the privacy policy: https://www.hotjar.com/privacy/
  1. We are a contractual partner of Hotjar Ltd. and only receive anonymised, statistical data on our company homepage via its services. We do not receive any other data, in particular we cannot identify users from this information. We have also concluded an order processing contract with Hotjar Ltd. in accordance with Art. 28 of the GDPR.
  2. The legal basis for (i) the processing of your data for marketing purposes is your consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR; (ii) the processing of anonymous data for statistical purposes is our legitimate interest in the design of our online shop and the efficiency of advertising pursuant to Art. 6 (1) sentence 1 lit. f GDPR.
Social Media Links So-called social media links from Facebook, Twitter, Instagram and Pinterest are used on our website. If you click on one of the social media links, you will be directed to our social media account with the social network in question. The respective network collects personal data about you; for more information, please see our privacy policy for social media (https://www.as-creation.com/en/privacy-policy) and the privacy statements of the respective social media providers. If you do not want the social networks to directly assign the data collected via our website to your profile on the respective service, you must log out of the respective service before visiting our website.^
YouTube-Videos
1. We have embedded YouTube videos in our online shop, which are stored at http://www.YouTube.com and which are directly accessible from our online shop. Embedding is executed as "extended data protection mode", i.e., no personal data shall be collected by YouTube if you do not access the video.
2. YouTube is a service of Google Inc. (address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Responsible Person und contact person in the EU is Google Ireland Limited (address: Gordon House, Barrow Street, Dublin 4, Ireland).
3. Personal data shall only be collected by YouTube, when you access a video. We have no influence on the scope of data collected. The collection of data is independent from the fact that you may have or have not a user account at YouTube.
4. Legal basis: your consent, art. 6 para. 1 sent. 1 lit. a GDPR.
Lottery
1. If you want to participate in one of our lotteries, we need to collect certain personal data, which will be documented in a server log file:
  - email address
2. In the event you get a prize, we will need the following additional data to deliver the prize to you:
  - title, first and last name
  - address (street, ZIP code, place, country)
  If the prize is provided by a cooperation partner, the cooperation partner shall send the prize to you. In this case we shall transfer your necessary data to the cooperation partner.
3. We process and store your data for the duration of the lottery. After the end of the lottery, your data will be deleted within 30 days. If you win, your data will be stored for tax reasons and deleted after six years at the latest.
4. Lotteries, which are connected to the section "inspiration" are carried out via our profile on Instagram. By accessing the respective link your will be re-directed to our Instagram account. Next to the data processing set forth above, the data privacy notice and conditions of use of Instagram will apply:
  - Terms of Use: https://help.instagram.com/581066165581870/
  - Data Privacy Notice: https://help.instagram.com/519522125107875
5. Legal basis: fulfilment of contract (execution of lotteries), art. 6 para. 1 l. 1 lit. b GDPR.
Comments and Contributions
1. You have the option to publish a comment or contribution in our online shop blog. When you send your comment / contribution your IP-address shall be documented in a server log file. We need this data to analyse and eliminate interruptions as well as to store the creator of the comment / contribution in the event of non-lawful content. The IP-address shall be deleted automatically after 7 days, when there is no prevailing interest for criminal prosecution.
2. Legal basis: legitimate interest to maintain and enhance technical functionality and to enable criminal prosecution, art. 6 para. 1 sent. 1 lit. f GDPR.
3. We reserve the right to delete comments or contributions that are not related to our products and services.
Server
1. The hosting services underlying this website are provided by Metaways Infosystems GmbH (address: Friedrich-Ebert-Straße 7, 48153 Münster, Germany). Metaways Infosystems GmbH offers Software as a Service (SaaS) services as part of cloud hosting. Metaways Infosystems GmbH automatically collects and stores server log files with information that your browser transmits to us. This information includes:
  - Browser type
  - operating system
  - Referrer URL (previously visited page)
  - Host name (IP address)
2. Metaways Infosystems GmbH cannot relate this data to specific persons. This data will not be merged with other data sources. After a statistical evaluation, the data will be deleted, at the latest after seven (7) days. Further information can be found in the data protection regulations of Metaways Infosystems GmbH. These can be viewed here: https://www.metaways.de/datenschutz/
3. We have concluded a contract for commissioned data processing. This contract regulates the scope, type, and purpose of Metaways Infosystems GmbH's access to data. The access options are limited only to necessary accesses that are required for the fulfilment of the hosting services.
4. Legal basis: legitimate interest in the necessary functionality of the website in accordance with Art. 6 para. 1 sent. 1 lit. f GDPR.
Closing Provisions
1. Beyond the data processing as set forth in this Data Privacy Notice there may be additional data processing by third parties, if you have given your consent to certain processing to that third party, in particular that it may monitor your web and app browser history and connect it to the account, which you have with that third party, and to use your account information to show personalized commercials to you no matter which website you access. Third party can be (non-exhaustive list): service provider for analysis and marketing (e.g., Google), YouTube, Social Media Networks (e.g., Facebook, Pinterest, Instagram), payment service provider (e.g., PayPal).
2. If you do not want a third party collecting and using your personal data for statistics, marketing and creation of user profiles, you can prevent cookies by changing certain settings of your browser or your user account.
  1. browser settings (e.g., suppressing third party cookies, i.e., you do not receive commercials of third parties);
  2. deactivation of cookies for conversion tracking, i.e., cookies of certain domains are blocked (note: this setting will be deleted when you delete all your cookies at the end of browser session);
  3. deactivation of personalized commercials http://www.aboutads.info/choices (note: this setting will be deleted when you delete all your cookies at the end of browser session);
  4. permanent deactivation in your browser settings at Firefox, Internet Explorer or Google Chrome: http://www.google.com/settings/ads/plugin
  5. deactivation of your device code in your device settings.
  You can also object to the creation of user profiles, please turn to the respective third party to exercise your rights.

Privacy policy

Data Privacy Notice for NEW-WALLS.com

tapetenshop.de